# US 2018/0322014 A1 · Method and system for fault handling during remote installation of software in a vehicle

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0322014 A1
- Document ID: US20180322014A1
- Status: Published application
- Kind: A1
- Application number: 15/964,222
- Filed: 2018-04-27
- Published: 2018-11-08
- Earliest claimed: 2017-05-04
- Assignees: Volvo Car Corporation
- Applicants: Volvo Car Corporation
- Inventors: Magnus PERSSON; Eric SANDBLING
- Web page: https://patentgrep.com/patent/US20180322014A1

## CPC

- G06F 11/1433: {during software upgrading}
- G06F 8/61: Installation
- G06F 11/1438: {Restarting or rejuvenating}
- G06F 2201/865: Monitoring of software
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method is described for remote installation of software in a vehicle. The method includes initializing an installation sequence having at least one installation sub-sequence, the at least one sub-sequence including at least one action. During installation, if the action fails, retrying the action. If the action fails after retrying the action, retrying the installation sub-sequence including the action. If the action fails after retrying the installation sub-sequence including the action, retrying the installation sequence having the installation sub-sequence. A system is also described for performing the method.

## Claims

### Claim 1

A method for remote installation of software in a vehicle, the method comprising:
initializing an installation sequence comprising at least one installation sub-sequence, the at least one sub-sequence comprising at least one action; and
during installation,
if the at least one action fails, retrying the at least one action,
if the at least one action fails after retrying the at least one action, retrying the at least one installation sub-sequence comprising the at least one action, and
if the at least one action fails after retrying the at least one installation sub-sequence comprising the at least one action, retrying the installation sequence comprising the at least one installation sub-sequence.

### Claim 2 (depends on 1)

The method according to claim 1 wherein retrying the action comprises retrying the action a predetermined number of times.

### Claim 3 (depends on 1)

The method according to claim 1 wherein retrying the sub-sequence comprises retrying the sub-sequence a predetermined number of times.

### Claim 4 (depends on 1)

The method according to claim 1 wherein retrying an action comprises modifying a feature of the action before retrying the action.

### Claim 5 (depends on 4)

The method according to claim 4 wherein a feature to modify in an action is selected based on a type of failure.

### Claim 6 (depends on 1)

The method according to claim 1 wherein the installation sequence comprises performing a plurality of installation sub-sequences in parallel, and, if an action fails, reducing the parallelism of the installation sequence.

### Claim 7 (depends on 1)

The method according to claim 1 further comprising, if an action fails, increasing a timeout for subsequently performed actions in an installation sub-sequence.

### Claim 8 (depends on 1)

The method according to claim 1 further comprising, if the installation sequence fails, re-booting a vehicle system on which the installation is attempted.

### Claim 9 (depends on 1)

The method according to claim 1 further comprising providing a report to a remote server, the report comprising information describing failures in the installation sequence, specifying a time of each failure and a type of each failure.

### Claim 10 (depends on 1)

The method according to claim 1 further comprising defining a failure in terms of a level of criticality.

### Claim 11 (depends on 9)

The method according to claim 9 further comprising providing a status report to a remote server, wherein the status of the vehicle system is the status representing the highest level of criticality encountered by the installation sequence.

### Claim 12 (depends on 1)

The method according to claim 1 further comprising:
after completing the installation, providing an installation summary comprising
a status for each control unit and data file involved in the installation,
a total number of retries during the installation, and
a total installation time for each data file;
wherein, in case of installation failure, the installation summary further comprises
a time of failure,
identification of a control unit in which a failure occurred,
identification of an installation data file for which a failure occurred,
identification of a sub-sequence in which a failure occurred,
identification of an action in which a failure occurred, and
a failure message.

### Claim 13

A system for remote installation of software in a vehicle, the system comprising:
a communication unit for communicating with a remote server;
at least one vehicle functionality control unit; and
a software installation control unit for use in the vehicle, the software installation control unit configured to
initialize an installation sequence comprising at least one installation sub-sequence, the at least one sub-sequence comprising at least one action, and
during installation,
if the at least one action fails, retry the at least one action,
if the at least one action fails after retrying the at least one action, retry the at least one installation sub-sequence comprising the at least one action, and
if the at least one action fails after retrying the at least one installation sub-sequence comprising the at least one action, retry the installation sequence comprising the at least one installation sub-sequence.

### Claim 14 (depends on 13)

The system according to claim 13 further comprising a plurality of vehicle functionality control units, wherein the software installation control unit is further configured to:
perform the installation sequence in parallel on the plurality of vehicle functionality control units, and if an action fails, reduce the number of vehicle functionality control units on which the installation sequence is performed simultaneously.

### Claim 15 (depends on 13)

A vehicle comprising the system of claim 13.

### Claim 16

A system for remote installation of software in a vehicle, the system comprising:
a software installation control unit for use in the vehicle, the software installation control unit configured to
initialize an installation sequence comprising at least one installation sub-sequence, the at least one sub-sequence comprising at least one action; and
during installation,
if the at least one action fails, retry the at least one action,
if the at least one action fails after retrying the at least one action, retry the at least one installation sub-sequence comprising the at least one action, and
if the at least one action fails after retrying the at least one installation sub-sequence comprising the at least one action, retry the installation sequence comprising the at least one installation sub-sequence.
